Good evening.
We use wpad in our network environment. This works well for all our browsers as Firefox, Internet Explorer and also Chrome.
Now we installed Sandboxie 5.22 and we have very low performance with Internet Explorer 11.
Our environment is Windows 7, Internet Explorer 11 and an actual release of Sandboxie (5.22).
If I disable Sandboxie everything works well again. If I put the values for our proxy manual into the settings menu, the Internet Explorer is fast again.
If I use Internet Explorer with automatic detection or I enter the configuration url of wpad server the performance is poor.
I googled a lot for some solution but did not found anything.
Btw.: Firefox with wpad and sandboxie runs smoothly. No problems.

Are you using any security software or settings?
Does the issue occur inside a new sandbox with default settings (do not copy from other sandboxes) ?
If you revert back to 5.20, does the issue go away?

Hi and sorry for late answer.
Yes, we use Symantec Endpoint Protection.
I could uninstall and test again.
The "error" occurs in default sandboxes. IE is very slow.
If I disable the sandbox with next start IE is fast again.
The error exists on all versions, I tested.

See if disabling the Symantec equivalent for Norton exploit protection helps (as covered in that thread). Otherwise, try removing Symantec for testing purposes (let us know how that worked, be sure to test inside a new Sandbox with default settings).

Otherwise if the issue persists even without Symantec, please provide the rest of the info we requested so that we can review it.

Hi.
I uninstalled Symantec and tried again.
Same result. The connection works but it is very slow and takes lots of time till I get an connection.
I also tried a new sandbox with default settings. Same result.
Also I can not go back to version 5.20 because of Microsoft Patches.
If I go back Sandboxie crashes.

If I disable Sandboxie (next start) and start IE everything is fast and smooth.
This happens only with enable wpad. If I setup IE with hard proxy settings everything is fine and smooth again.
I think this has something to do with wpad.

I looked at the resource monitor but have no idea how to use it. I will read your information about it.
But any idea which switch could be used to optimize proxy settings?

Do you have a proxy script that we can review?
Are there any addons installed?
Are all websites presenting issues?
Please provide repro steps.

As for Resource Access Monitor, you need to run it while reproducing the issue, then copy the output and paste it in the forums. Highlight the output once pasted, and click on the "</>" to format it. https://www.sandboxie.com/ResourceAccessMonitor

I checked the script because I thought that there may be some exhaustive use of DNS but I think it is not.
No, there are no addons installed. It is the default IE 11.
Nearly all websites react slowly when the browser (Only IE) starts in sandbox.
Firefox has no problems.
If I disable the sandbox IE is also fast again.

Here is the output of the Resource Monitor when IE is started.
Sorry. I had to use x on some information again.

Can you please re-post the output of Res. Acc. Mon, without Symantec?
As explained before, it is currently not supported, as it causes issues with web browsers (YMMV, some users were able to find workarounds as provided before, but we need to see the results without it) .

I am also seeing references to a network drive. If needed, you may want to enable access to it
Right-click on your Sandbox--> Sandbox settings --> Restrictions --> Network files
Un-check the block and re-test.

If you need to open a path to the drive (for read / write access) :
Sandbox Settings -> Resource Access -> File Access
Choose the level of access you want to provide, apply it and okay your way out.

Is the slowness issue present without using WPAD but running IE Sandboxed?

I also noticed this nvidia entry:
c:\program files (x86)\nvidia corporation\3d vision\nvscpapi.dll
I understand you are using IE, however, please have a look at this Firefox thread regarding slowness and nvidia drivers:viewtopic.php?p=127330#p127330

Regards,
Barb.-

PS: Regarding your script, I am waiting for the devs to review that part.

Yes, I saw this too in the output. But we do not want the browser to be able to access the network drives. It is a wished behavior.
No, if I use hard coded proxy settings all is fast again.
The problem is that we need wpad here because we have a lot of notebooks and wpad is very good for auto configuration here.

I tested your PAC file with our internal test proxy server. I don't see any performance problem at all. It is just as fast in Sbie as in the host. How long is it taking before a page begins to display in Sbie?

Hi and good morning.
It depends and differs. Sometimes I only get a white screen and it takes 10 till 15 seconds till the startpage (intranet) ist displayed.
If I disable the sandbox it takes only one second or maybe even faster.
If I enter an url it also takes some time till the page is loaded.
Only IE and enabled sandboxie shows this behaviour.
Very strange.

Yes, the pac file is hosted on an internal webserver.

Yes, the typo is correct. If our proxy is not available the browser switches to direct connection.
But you are right. It does not affect out situation.

Maybe I'm on the wrong way and it has nothing to do with wpad. But it seems so.
I'll keep trying.

If you disable your script (or test off-network) and run IE in the Sandbox (using a new Sandbox with default settings), do you still see slowness?

Also, can we please get a PML while you repro the issue?
Download procmon.exe from https://docs.microsoft.com/en-us/sysint ... ds/procmon
Start procmon and reproduce the issue, then save the log and provide us the link (you will have to upload it to a file hosting website as they tend to be big files).